dc7f868d04e263f9fdddbeed5a8f0a1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc7f868d04e263f9fdddbeed5a8f0a1e_JaffaCakes118
Size

9KB
MD5

dc7f868d04e263f9fdddbeed5a8f0a1e
SHA1

459cc17a3bca7af5063ae11e94320e0c50d9c306
SHA256

51020bc84f4b4f7bdecf0341039c3710da7efbbcb084ab75ed93029350e4e452
SHA512

5de54202602dfb917e705da34b4524d58aaa380e78b47958e4f5c0d35d3fe6cd15a84175aa5cb40408d698b881095c30fb248128344d8cc14d5bd5bce9171abf
SSDEEP

96:VQuTb6w0mKSps0Or2FswoVFHoGoxq2EperSCx/EW48CMQWvBZqo2:2UmOs0OC21BoGo7Eper1cW48CMQWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc7f868d04e263f9fdddbeed5a8f0a1e_JaffaCakes118

Files

dc7f868d04e263f9fdddbeed5a8f0a1e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6e934e6b8040ebafe3e3c9248e764591

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
LoadLibraryA
RtlZeroMemory
GetTempFileNameA
WinExec
lstrcatA
lstrcpyA
GetProcAddress
GetPrivateProfileStringA
GetPrivateProfileIntA
GetComputerNameA
DeleteFileA
Sleep
CreateThread

advapi32

RegisterServiceCtrlHandlerA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA
SetServiceStatus

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle

user32

wsprintfA

Exports

Exports

ServiceMain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ